Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.mft (raw, json)
Hash identifier: u581kIdO+Zk2ATsc63QYrvU9KG5PW7aiTdk2c350jzQ=
Subject key identifier: 8E:AA:4F:53:75:91:5F:39:DC:70:5C:36:33:37:2D:18:24:99:D0:97
Authority key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Certificate issuer: /CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Certificate serial: 019F17C2D45928B04FD7BEEB54B156693010
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
Manifest number: 07D0
Signing time: Tue 30 Jun 2026 09:01:11 +0000
Manifest this update: Tue 30 Jun 2026 09:01:11 +0000
Manifest next update: Wed 01 Jul 2026 09:01:11 +0000
Files and hashes: 1: 1-jDy9nL7VLpJd8bhpronExwjH_I.crl (hash: fB6RkTXZUX25R8yZZ20SHLFhD3dvgd3orK0ljHoAfbE=)
2: Ip878u9pBQi9g89YkISpQa7bCf0.roa (hash: 5w9cx6mrV87FtSruYjnPB/haPzCFoJHrmqiObhlSqk0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c2:d4:59:28:b0:4f:d7:be:eb:54:b1:56:69:30:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Validity
Not Before: Jun 30 09:01:11 2026 GMT
Not After : Jul 1 09:01:11 2026 GMT
Subject: CN=8eaa4f5375915f39dc705c3633372d182499d097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a1:b0:ad:0f:ac:92:cb:87:45:68:f7:6b:93:
d3:cb:78:84:3c:61:3b:71:87:bb:50:e9:9a:18:ad:
23:e1:c0:f9:b4:be:9c:b4:08:df:2b:3a:38:03:3d:
ed:8f:25:7e:d6:9e:7d:de:68:64:8c:8a:d3:29:1b:
c5:9e:a1:b9:0c:df:7f:18:f0:0b:8c:6e:6d:d1:36:
a0:4f:9a:a1:0f:54:12:42:b8:3b:99:e0:79:02:03:
d8:86:ef:31:b8:50:34:77:c3:e8:2a:66:c8:d7:c6:
91:dc:43:1b:a4:2f:1f:2d:16:f0:f4:51:74:82:15:
9d:10:15:68:5c:23:76:d7:29:c7:c1:f5:f4:5f:86:
88:38:3d:6b:45:a0:1b:f8:7f:38:19:c4:4f:4b:25:
f2:85:08:fa:f1:54:95:c5:ad:1f:f6:f7:df:12:72:
d6:f6:99:1c:b4:bd:26:25:08:26:aa:6e:49:98:96:
4e:1c:9e:68:ee:ba:ff:a8:83:c2:41:ef:b5:03:f1:
3d:ee:61:07:b4:ca:46:81:b3:54:35:e5:e3:45:b9:
f5:45:9c:69:6f:20:fa:01:32:7c:20:57:73:7d:5f:
c1:51:fc:4d:15:86:fc:a4:56:54:03:9c:a1:c6:d7:
78:27:07:de:44:6a:d2:84:5b:4b:10:62:36:74:2c:
4f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:AA:4F:53:75:91:5F:39:DC:70:5C:36:33:37:2D:18:24:99:D0:97
X509v3 Authority Key Identifier:
keyid:FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:52:05:c1:5e:e6:f4:9f:bf:25:36:fb:be:6a:14:1a:b8:e6:
f8:dd:55:1f:9b:b6:ab:03:93:d4:35:ca:30:04:6e:79:75:01:
94:a7:42:6c:77:84:5f:16:34:09:3f:bb:25:ca:db:92:5c:82:
e5:be:32:e1:e4:06:0a:34:e2:06:5f:6c:3d:ce:88:27:36:7f:
2a:2d:1d:36:a0:45:e0:55:90:75:8a:cc:bc:fb:5b:06:7d:ed:
e8:e1:31:28:f7:40:88:27:ac:10:ca:a7:e4:10:e3:dd:b0:4b:
ee:a6:0b:8e:ef:83:18:6f:90:09:77:aa:03:51:d6:89:69:6c:
9a:d1:6f:9c:3f:fa:03:48:07:55:fb:c0:3f:7f:42:4f:53:89:
54:a0:1d:94:0e:78:19:bf:99:d0:25:0a:50:4c:40:a4:13:9f:
ea:f1:3f:98:bf:1c:af:53:d6:e6:47:be:79:0f:07:28:f4:51:
9b:65:55:90:2d:4b:6a:d2:bb:ea:2e:01:4e:49:6d:b0:7a:34:
13:0f:ee:db:82:50:aa:32:98:fc:e8:7c:32:c3:28:58:16:05:
1b:b9:d5:7c:7c:f8:75:c9:65:c5:b8:ae:36:84:ca:72:27:ae:
75:28:a9:00:6d:45:52:3a:2b:02:af:bd:b7:ad:bf:d4:51:3c:
ef:67:5c:f0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ8XwtRZKLBP177rVLFWaTAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhMzBmMmY2NzJmYjU0YmE0OTc3YzZlMWE2YmEyNzEzMWMy
MzFmZjIwHhcNMjYwNjMwMDkwMTExWhcNMjYwNzAxMDkwMTExWjAzMTEwLwYDVQQD
Eyg4ZWFhNGY1Mzc1OTE1ZjM5ZGM3MDVjMzYzMzM3MmQxODI0OTlkMDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aGwrQ+sksuHRWj3a5PTy3iEPGE7
cYe7UOmaGK0j4cD5tL6ctAjfKzo4Az3tjyV+1p593mhkjIrTKRvFnqG5DN9/GPAL
jG5t0TagT5qhD1QSQrg7meB5AgPYhu8xuFA0d8PoKmbI18aR3EMbpC8fLRbw9FF0
ghWdEBVoXCN21ynHwfX0X4aIOD1rRaAb+H84GcRPSyXyhQj68VSVxa0f9vffEnLW
9pkctL0mJQgmqm5JmJZOHJ5o7rr/qIPCQe+1A/E97mEHtMpGgbNUNeXjRbn1RZxp
byD6ATJ8IFdzfV/BUfxNFYb8pFZUA5yhxtd4JwfeRGrShFtLEGI2dCxPMQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFI6qT1N1kV853HBcNjM3LRgkmdCXMB8GA1UdIwQY
MBaAFPow8vZy+1S6SXfG4aa6JxMcIx/yMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1qRHk5bkw3VkxwSmQ4Ymhwcm9uRXh3akhfSS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjEvMTk2OGQwLWZhZjEtNGUzNy1hYzg4
LWQ0MDRiNDgwYzU2Ny8xLzEtakR5OW5MN1ZMcEpkOGJocHJvbkV4d2pIX0kubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzYxLzE5NjhkMC1mYWYxLTRlMzctYWM4OC1kNDA0YjQ4MGM1
NjcvMS8xLWpEeTluTDdWTHBKZDhiaHByb25FeHdqSF9JLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglIF
wV7m9J+/JTb7vmoUGrjm+N1VH5u2qwOT1DXKMARueXUBlKdCbHeEXxY0CT+7Jcrb
klyC5b4y4eQGCjTiBl9sPc6IJzZ/Ki0dNqBF4FWQdYrMvPtbBn3t6OExKPdAiCes
EMqn5BDj3bBL7qYLju+DGG+QCXeqA1HWiWlsmtFvnD/6A0gHVfvAP39CT1OJVKAd
lA54Gb+Z0CUKUExApBOf6vE/mL8cr1PW5ke+eQ8HKPRRm2VVkC1LatK76i4BTklt
sHo0Ew/u24JQqjKY/Oh8MsMoWBYFG7nVfHz4dcllxbiuNoTKcieudSipAG1FUjor
Aq+9t62/1FE872dc8A==
-----END CERTIFICATE-----
Generated at Tue Jun 30 18:27:11 2026 by rpki-client